realsobek
commented
2 months ago My colleague helped me again with remote investigation. Notebook has 'Boot Order Lock' disabled. For the record: if 'Boot Order Lock' is enabled, you see the red bold text "BootOrder is locked in firmware setup" in:
# fwupdmgr get-updates
LENOVO 21H3002EGE │ ├─Embedded Controller: ... │ │ Current version: 0.1.9 │ │ Minimum Version: 0.1.9 │ │ Vendor: Lenovo (DMI:LENOVO) │ │ Update State: Success │ │ Update Error: BootOrder is locked in firmware setup ... ├─System Firmware: ... │ │ Current version: 0.1.12 │ │ Vendor: Lenovo (DMI:LENOVO) │ │ Update State: Success │ │ Update Error: BootOrder is locked in firmware setup ...
I did not try fwupdmgr update.
'Boot Order Lock' disabled again. After preparing firmware update with fwupdmgr get-updates and rebooting notebook, pressing F12 (to open one-time Boot Menu) and running "Linux Firmware Updater", you see on screen in upper left corner:
fwupd-efi version 1.6
WARNING: Could not apply capsule update: Not Found
WARNING: Could not apply capsules: Not Found
Reset SystemWe tried a different notebook of same make and model (but SecureBoot on (in "Setup Mode") instead of off (in "User Mode")). All firmware updates were applied successfully in one step:
- Embedded Controller 0.1.9 -> 0.1.13
- KBG5AZNT512G LA KIOXIA 1108ANLA -> 1109ANLA
- System Firmware 0.1.12 -> 0.1.21
- UEFI dbx 220 -> 371
So it must be notebook-specific. The only difference was SecureBoot status. We went back to the notebook that lacks the firmware updates. Enabled SecureBoot and rebooted notebook. Fedora could not start. We reinstalled Fedora 40 Workstation to make it work again and get rid of testing configuration. Order of firmware installation testing; same versions as in initial message (result in brackets):
- Embedded Controller (fail) + System Firmware (fail) + DBX (220 -> 371: success)
- Embedded Controller (fail) + System Firmware (fail) (same message as above from manual F12 start, but we did not press F12)
- System Firmware (success)
- Embedded Controller (success)
So the SecureBoot status made a difference, but SecureBoot Mode did not. Problem solved. I leave it at your discretion to close this ticket. We ought to have notebooks of same make and model available for further testing. If no further testing is needed, you can close this ticket.
On a Lenovo notebook 21H3002EGE "L15 Gen 4 (Type 21H3, 21H4) Laptop (ThinkPad) - Type 21H3" with Intel CPU running Fedora 40 Workstation fwupdmgr updated some devices' firmware - I do not remember the details - but fails to update:
To no avail I tried:
fwupdmgr updateand update both together as well as each individuallyfwupdmgr install /root/NAME.cab ; rebootfwupdmgr update(reverted withdnf distro-syncafterwards, except for kernel)Reinstalling the notebook is possible. A few more of these notebooks ought to be available if special testing is needed. Thank you for your help in advance.
I checked other issues for required debug information. I use the Slash command Details in order to hide the details. I use the pre tag instead of p tag for formatting.
# fwupdmgr --version
# fwupdmgr get-devices --show-all-devices
LENOVO 21H3002EGE │ ├─ELAN067D:00 04F3:3209: │ Device ID: 5080849fbc31194136d5a46bbc31fed3cf824d42 │ Summary: Touchpad │ Current version: 0x0005 │ Bootloader Version: 0x0003 │ Vendor: ELAN Microelectronics (HIDRAW:0x04F3) │ GUIDs: 38897f13-3a41-5b8a-9cc8-9370a2b41291 ← HIDRAW\VEN_04F3&DEV_3209 │ 4b69bffd-d456-54ae-baee-e11b517fa3bd ← HIDRAW\VEN_04F3&DEV_3209&MOD_0037 │ 3313b7ba-c61b-5183-a9c4-3411cc892998 ← ELANTP\ICTYPE_14&MOD_0037 │ a97baf40-d178-5cf6-81e6-874542d698e2 ← ELANTP\ICTYPE_14&MOD_0037&DRIVER_HID │ Device Flags: • Internal device │ • Updatable │ ├─Unknown Device: │ Device ID: 6b5a06645e27c4e94b6e67d5185c46d11ec9ad67 │ GUID: c96751f4-16e8-59ea-975d-69d3dac88d7d ← GPIO\ID_INTC1055:00 │ ├─13th Gen Intel Core™ i7-1355U: │ Device ID: 4bde70ba4e39b28f9eab1628f9dd6e6244c03027 │ Current version: 0x00004121 │ Vendor: Intel │ GUIDs: c3f97ae6-7da2-54cc-ad26-3225f9517203 ← CPUID\PRO_0&FAM_06&MOD_BA │ cd7d026a-65a8-597d-a73f-b856af9dc9e2 ← CPUID\PRO_0&FAM_06&MOD_BA&STP_3 │ Device Flags: • Internal device │ ├─EM05-G: │ Device ID: 02861494e3c701c896953cd442bd2f1ad867e1eb │ Summary: Mobile broadband device │ Current version: EM05GFAR07A07M1G_01.002.01.002 │ Vendor: Quectel (USB:0x2C7C) │ GUID: 0322d845-8497-5cbe-bfd5-2c2a6c9ea129 ← USB\VID_2C7C&PID_030A&REV_0200 │ Device Flags: • Updatable │ • System requires external power source │ • Unsigned Payload │ ├─Embedded Controller: │ Device ID: bdabeb256aff8415c3fddae68632a65269bb3f55 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 0.1.9 │ Minimum Version: 0.1.9 │ Vendor: Lenovo (DMI:LENOVO) │ Update State: Success │ GUID: 5c0afb70-bd0a-4dd4-9a4c-d216544288d0 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─Fingerprint Sensor: │ Device ID: aa4b7bf130da693bbf1a8a785ad830190788233b │ Summary: Match-On-Chip fingerprint sensor │ Current version: 01000352 │ Vendor: Goodix (USB:0x27C6) │ Install Duration: 10 seconds │ Serial Number: UID58D0A81C_XXXX_MOC_B0 │ GUID: 14450e82-8667-54c3-98e1-098d8c6dc3b8 ← USB\VID_27C6&PID_6594 │ Device Flags: • Updatable │ • Device can recover flash failures │ • Signed Payload │ ├─Integrated Camera: │ Device ID: 54dda0fbfd5ac0dee5efc0ec4baefc9190d666ac │ Current version: 75.20 │ Vendor: Chicony Electronics Co.,Ltd. (USB:0x04F2) │ Serial Number: 0001 │ GUID: bcd2c020-e315-55aa-b7e1-7d2d7108037e ← USB\VID_04F2&PID_B74F │ Device Flags: • Updatable │ ├─Intel Management Engine: │ Device ID: 3c2b93353e5679f5e929fdf9ef2a1c82f311f03f │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1.25.2124 │ Vendor: Lenovo (DMI:LENOVO) │ Update State: Success │ GUID: 23192307-d667-4bdf-af1a-6059db171246 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─KBG5AZNT512G LA KIOXIA: │ Device ID: 03281da317dccd2b18de2bd1cc70a782df40ed7e │ Summary: NVM Express solid state drive │ Current version: 1109ANLA │ Vendor: KIOXIA Corporation (NVME:0x1E0F) │ Serial Number: 73GPD1LMQAWU │ GUIDs: 6cefd2de-46a3-5fb7-acb1-25ef14bec6de ← NVME\VEN_1E0F&DEV_000C │ 52a1c489-1299-5fa5-a97f-384dde8c5fa2 ← NVME\VEN_1E0F&DEV_000C&SUBSYS_1E0F0001 │ fb9f301e-081f-5364-b90d-a90eee931c1b ← KBG5AZNT512G LA KIOXIA │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ • Signed Payload │ ├─NV156FHM-N4N: │ Device ID: aec1a869eb0df71b7cea6b3ac71d39b830faf164 │ GUID: 61c89a6b-03e6-505e-9a64-9cf8b651e136 ← DRM\VEN_BOE&DEV_085B │ Device Flags: • Internal device │ ├─Raptor Lake-P [UHD Graphics]: │ Device ID: 5792b48846ce271fab11c4a545f7a3df0d36e00a │ Current version: 04 │ Vendor: Intel Corporation (PCI:0x8086) │ GUIDs: c9b272c3-230b-5f50-be05-4cf4374d148b ← PCI\VEN_8086&DEV_A721 │ 58907901-6efb-5bd9-9624-62e7cad0a1fa ← PCI\VEN_8086&DEV_A721&SUBSYS_17AA50BE │ Device Flags: • Internal device │ • Cryptographic hash verification is available │ ├─System Firmware: │ │ Device ID: cdf9504993efe69929e860d15cf4b5edfe51012b │ │ Summary: UEFI System Resource Table device (updated via NVRAM) │ │ Current version: 0.1.12 │ │ Vendor: Lenovo (DMI:LENOVO) │ │ Update State: Success │ │ GUID: 96f43f55-bce3-4463-94a5-4d7954b67772 │ │ Device Flags: • Internal device │ │ • Updatable │ │ • System requires external power source │ │ • Supported on remote server │ │ • Needs a reboot after installation │ │ • Cryptographic hash verification is available │ │ • Device is usable for the duration of the update │ │ Device Requests: • Message │ │ │ ├─BootGuard Configuration: │ │ Device ID: b0d4430dfa6bde9f0c22680df36dbc8c15c80753 │ │ Current version: 01 │ │ Vendor: Intel Corporation (MEI:0x8086) │ │ GUIDs: dd17041c-09ea-4b17-a271-5b989867ec65 │ │ fccad2fe-62ae-5879-b7a9-4ead7bce50f4 ← MEI\VEN_8086&DEV_51E0 │ │ 9ac155d9-755b-511e-a10b-b06d510bf5e0 ← MEI\VEN_8086&DEV_51E0&SUBSYS_17AA50BD │ │ Device Flags: • Internal device │ │ │ └─UEFI dbx: │ Device ID: 362301da643102b9f38477387e2193e57abaa590 │ Summary: UEFI revocation database │ Current version: 371 │ Minimum Version: 371 │ Vendor: UEFI:Linux Foundation │ Install Duration: 1 second │ GUIDs: 5971a208-da00-5fce-b5f5-1234342f9cf7 ← UEFI\CRT_A9087D1044AD18F7A94916D284CBC01827CF23CD8F60B79072C9CAA1FEF4D649&ARCH_X64 │ f8ba2887-9411-5c36-9cee-88995bb39731 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_X64 │ Device Flags: • Internal device │ • Updatable │ • Supported on remote server │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ • Only version upgrades are allowed │ • Signed Payload │ ├─TPM: │ Device ID: c6a80ac3a22083423992a3cb15018989f37834d6 │ Current version: 7.2.3.1 │ Vendor: Nuvoton Technology (TPM:NTC) │ GUIDs: fac1c8f3-73c8-5cd6-8330-07a3690b5140 ← TPM\VEN_NTC&DEV_0000 │ bf68887b-e3d9-5572-9a02-0d34979502c7 ← TPM\VEN_NTC&MOD_NPCT75x"!"8rls │ e9ccc1dc-960a-5e09-afe9-e59a904b776d ← TPM\VEN_NTC&DEV_0000&VER_2.0 │ bc8b2f06-5f89-5b3a-bc74-976e0329f53b ← TPM\VEN_NTC&MOD_NPCT75x"!"8rls&VER_2.0 │ Device Flags: • Internal device │ • System requires external power source │ • Needs a reboot after installation │ • Device can recover flash failures │ • Full disk encryption secrets may be invalidated when updating │ • Signed Payload │ ├─UEFI Device Firmware: │ Device ID: 1bb50e5e7be06e35cb540dbf97391beef294c4b8 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 0 │ Minimum Version: 15 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: f8637dbe-5762-0000-873a-910aa71c49e4 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 81568164782039dbd4a74856cacb9800f408d44e │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 70159 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 4e88068b-41b2-4e05-893c-db0b43f7d348 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: f7d8680210f5543c047c478c1a07479e58c6afc5 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 18417740 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: d8939f29-dc79-40e9-a35d-8d133440736f │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 89edd1f802189f8f8d3528a18ee99fb0528607cf │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 16777225 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 1b80ddcc-6c04-485a-a26e-0baa2be11938 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 768bf9e45007363bc0549aba7ffaec49fc18cdd8 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 04cb082c-77e9-4fd8-8832-94e0bdd2dfce │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 4d74c5eb1f87bc21ee61f29809221c4adef8a8ea │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: f2a672a0-360b-4c74-91f8-b1424ee68133 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 793edc5c44d1fb3b0921337fc3de03d50a857f67 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 117572353 │ Minimum Version: 117572353 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 5d712b6d-4486-4119-a3cc-a7bb741bb19b │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 7dccda75b1f76a97e675b08e7e0f8ab9924ad9ce │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 69585d92-b50a-4ad7-b265-2eb1ae066574 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: f905a7bd8805851b14be474d006372f37cc9342d │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 76ca0ad8-4a14-4389-b7e5-fd88791762ad │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 7e6427fb78fdb31553c3589b14cf9a40bd2e1f2e │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 626d93db-2c42-48c3-915a-71f968a81b04 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: cef254ddb406e77ace86f4cd92e2a7db5aa308fc │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 86a885ee-d71e-2ed6-0fc1-9d6ccc9677eb │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 6f0c4a0cc2cd035c45fece35226e4aaafc449cd5 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 117572353 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 0eb9bda9-3010-493a-a6a8-b5e80eddf870 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 2c8ac8658d3e6efec9eab49eef330a61d9929111 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 262144 │ Minimum Version: 57374 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 09f77c9f-1c5d-4616-bafb-bbb19f557480 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ ├─UEFI Device Firmware: │ Device ID: 01c5e7f374474c6eb307b1399d357e3216f46e15 │ Summary: UEFI System Resource Table device (updated via NVRAM) │ Current version: 5 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 3aab9e4d-1502-438a-a488-f07ad942306a │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message │ └─UEFI Platform Key: Device ID: 6924110cde4fa051bfdc600a60620dc7aa9d3c6a Summary: Lenovo Ltd. PK CA 2012 Vendor: Lenovo Ltd. GUID: 71599d14-9b31-5270-b3bd-74c494585820 ← UEFI\CRT_9AEF2123F4DE7C19AFABD909BB2C8CAC4411E07E# efibootmgr -v
BootCurrent: 0000 Timeout: 0 seconds BootOrder: 0000,001D,001E,001F,0020,0021,0022,0023,0024,0025,0002 Boot0000* Fedora HD(1,GPT,569dd1f3-186e-44c7-ad68-f23f7d57c255,0x800,0x12c000)/\EFI\fedora\shimx64.efi dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 c0 12 00 00 00 00 00 f3 d1 9d 56 6e 18 c7 44 ad 68 f2 3f 7d 57 c2 55 02 02 / 04 04 34 00 5c 00 45 00 46 00 49 00 5c 00 66 00 65 00 64 00 6f 00 72 00 61 00 5c 00 73 00 68 00 69 00 6d 00 78 00 36 00 34 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00 Boot0001* Windows Boot Manager HD(1,GPT,b1710260-d3ee-4809-b5d2-b8fb4627968c,0x800,0x82000)/\EFI\Microsoft\Boot\bootmgfw.efi57494e444f5753000100000088000000780000004200430044004f0042004a004500430054003d007b00390064006500610038003600320063002d0035006300640064002d0034006500370030002d0061006300630031002d006600330032006200330034003400640034003700390035007d00000000000100000010000000040000007fff0400 dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 20 08 00 00 00 00 00 60 02 71 b1 ee d3 09 48 b5 d2 b8 fb 46 27 96 8c 02 02 / 04 04 46 00 5c 00 45 00 46 00 49 00 5c 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 5c 00 42 00 6f 00 6f 00 74 00 5c 00 62 00 6f 00 6f 00 74 00 6d 00 67 00 66 00 77 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00 data: 57 49 4e 44 4f 57 53 00 01 00 00 00 88 00 00 00 78 00 00 00 42 00 43 00 44 00 4f 00 42 00 4a 00 45 00 43 00 54 00 3d 00 7b 00 39 00 64 00 65 00 61 00 38 00 36 00 32 00 63 00 2d 00 35 00 63 00 64 00 64 00 2d 00 34 00 65 00 37 00 30 00 2d 00 61 00 63 00 63 00 31 00 2d 00 66 00 33 00 32 00 62 00 33 00 34 00 34 00 64 00 34 00 37 00 39 00 35 00 7d 00 00 00 00 00 01 00 00 00 10 00 00 00 04 00 00 00 7f ff 04 00 Boot0002* Linux-Firmware-Updater HD(1,GPT,569dd1f3-186e-44c7-ad68-f23f7d57c255,0x800,0x12c000)/\EFI\fedora\fwupdx64.efi dp: 04 01 2a 00 01 00 00 00 00 08 00 00 00 00 00 00 00 c0 12 00 00 00 00 00 f3 d1 9d 56 6e 18 c7 44 ad 68 f2 3f 7d 57 c2 55 02 02 / 04 04 36 00 5c 00 45 00 46 00 49 00 5c 00 66 00 65 00 64 00 6f 00 72 00 61 00 5c 00 66 00 77 00 75 00 70 00 64 00 78 00 36 00 34 00 2e 00 65 00 66 00 69 00 00 00 / 7f ff 04 00 Boot0010 Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9) dp: 04 06 14 00 66 8b 1c 72 6c 42 86 4e 8e 99 34 57 c4 6a b0 b9 / 7f ff 04 00 Boot0011 Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850) dp: 04 06 14 00 2d 76 6a 12 58 57 ca 4f 85 31 20 1a 7f 57 f8 50 / 7f ff 04 00 Boot0012 Diagnostic Splash Screen FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380) dp: 04 06 14 00 a6 d9 d8 a7 b0 6a eb 4a ad 9d 16 3e 59 a7 a3 80 / 7f ff 04 00 Boot0013 Lenovo Diagnostics FvFile(3f7e615b-0d45-4f80-88dc-26b234958560) dp: 04 06 14 00 5b 61 7e 3f 45 0d 80 4f 88 dc 26 b2 34 95 85 60 / 7f ff 04 00 Boot0014 Asset Information FvFile(da465b87-a26f-4c12-b78a-0361428fa026) dp: 04 06 14 00 87 5b 46 da 6f a2 12 4c b7 8a 03 61 42 8f a0 26 / 7f ff 04 00 Boot0015 Regulatory Information FvFile(478c92a0-2622-42b7-a65d-5894169e4d24) dp: 04 06 14 00 a0 92 8c 47 22 26 b7 42 a6 5d 58 94 16 9e 4d 24 / 7f ff 04 00 Boot0016 ThinkShield secure wipe FvFile(3593a0d5-bd52-43a0-808e-cbff5ece2477) dp: 04 06 14 00 d5 a0 93 35 52 bd a0 43 80 8e cb ff 5e ce 24 77 / 7f ff 04 00 Boot0017 ThinkShield Passwordless Power-On Device Manager FvFile(08448b41-7f83-49be-82a7-0e84790ab133) dp: 04 06 14 00 41 8b 44 08 83 7f be 49 82 a7 0e 84 79 0a b1 33 / 7f ff 04 00 Boot0018 Wi-Fi Configuration FvFile(d3aaff0f-cb22-4792-896c-802c2e9383ba)2d004100700070000000 dp: 04 06 14 00 0f ff aa d3 22 cb 92 47 89 6c 80 2c 2e 93 83 ba / 7f ff 04 00 data: 2d 00 41 00 70 00 70 00 00 00 Boot0019 Reinstall Windows from Cloud FvFile(3edbaac4-5017-4870-8cc4-721f9ef1974f)2d004100700070000000 dp: 04 06 14 00 c4 aa db 3e 17 50 70 48 8c c4 72 1f 9e f1 97 4f / 7f ff 04 00 data: 2d 00 41 00 70 00 70 00 00 00 Boot001A Intel(R) MEBx FvFile(29a70110-7762-4211-ae88-fab19b7665be) dp: 04 06 14 00 10 01 a7 29 62 77 11 42 ae 88 fa b1 9b 76 65 be / 7f ff 04 00 Boot001B Startup Interrupt Menu FvFile(f46ee6f4-4785-43a3-923d-7f786c3c8479) dp: 04 06 14 00 f4 e6 6e f4 85 47 a3 43 92 3d 7f 78 6c 3c 84 79 / 7f ff 04 00 Boot001C Rescue and Recovery FvFile(665d3f60-ad3e-4cad-8e26-db46eee9f1b5) dp: 04 06 14 00 60 3f 5d 66 3e ad ad 4c 8e 26 db 46 ee e9 f1 b5 / 7f ff 04 00 Boot001D* USB CD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,86701296aa5a7848b66cd49dd3ba6a55) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 86 70 12 96 aa 5a 78 48 b6 6c d4 9d d3 ba 6a 55 / 7f ff 04 00 Boot001E* USB FDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,6ff015a28830b543a8b8641009461e49) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 6f f0 15 a2 88 30 b5 43 a8 b8 64 10 09 46 1e 49 / 7f ff 04 00 Boot001F* NVMe0 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a400) dp: 03 0a 25 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 00 1c 19 99 32 d9 4c 4e ae 9a a0 b6 e9 8e b8 a4 00 / 7f ff 04 00 Boot0020* USB HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,33e821aaaf33bc4789bd419f88c50803) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 33 e8 21 aa af 33 bc 47 89 bd 41 9f 88 c5 08 03 / 7f ff 04 00 Boot0021* PXE BOOT VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 78 a8 4a af 2b 2a fc 4e a7 9c f5 cc 8f 3d 38 03 / 7f ff 04 00 Boot0022* LENOVO CLOUD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ad38ccbbf7edf04d959cf42aa74d3650)/Uri(https://download.lenovo.com/pccbbs/cdeploy/efi/boot.efi) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ad 38 cc bb f7 ed f0 4d 95 9c f4 2a a7 4d 36 50 / 03 18 3b 00 68 74 74 70 73 3a 2f 2f 64 6f 77 6e 6c 6f 61 64 2e 6c 65 6e 6f 76 6f 2e 63 6f 6d 2f 70 63 63 62 62 73 2f 63 64 65 70 6c 6f 79 2f 65 66 69 2f 62 6f 6f 74 2e 65 66 69 / 7f ff 04 00 Boot0023* ON-PREMISE VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ad38ccbbf7edf04d959cf42aa74d3650)/Uri() dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ad 38 cc bb f7 ed f0 4d 95 9c f4 2a a7 4d 36 50 / 03 18 04 00 / 7f ff 04 00 Boot0024 Other CD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a35400) dp: 03 0a 25 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ae a2 09 0a df de 21 4e 8b 3a 5e 47 18 56 a3 54 00 / 7f ff 04 00 Boot0025 Other HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ca88c2349e7ae947beeb43038a5aeae700) dp: 03 0a 25 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ca 88 c2 34 9e 7a e9 47 be eb 43 03 8a 5a ea e7 00 / 7f ff 04 00 Boot0026* IDER BOOT CDROM PciRoot(0x0)/Pci(0x14,0x0)/USB(11,1) dp: 02 01 0c 00 d0 41 03 0a 00 00 00 00 / 01 01 06 00 00 14 / 03 05 06 00 0b 01 / 7f ff 04 00 Boot0027* IDER BOOT Floppy PciRoot(0x0)/Pci(0x14,0x0)/USB(11,0) dp: 02 01 0c 00 d0 41 03 0a 00 00 00 00 / 01 01 06 00 00 14 / 03 05 06 00 0b 00 / 7f ff 04 00 Boot0028* ATA HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f6) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b 91 af 62 59 56 44 9f 41 a7 b9 1f 4f 89 2a b0 f6 / 7f ff 04 00 Boot0029* ATAPI CD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a354) dp: 03 0a 24 00 d2 38 78 bc 82 0f 60 4d 83 16 c0 68 ee 79 d2 5b ae a2 09 0a df de 21 4e 8b 3a 5e 47 18 56 a3 54 / 7f ff 04 00# efivar -l | grep fwhas no output.# tree /boot
Is this a Lenovo system with 'Boot Order Lock' turned on in the BIOS? No. BIOS Setup -> Startup -> Boot Order Lock = Off
# fwupdmgr get-history
LENOVO 21H3002EGE │ ├─System Firmware: │ │ Device ID: cdf9504993efe69929e860d15cf4b5edfe51012b │ │ Previous version: 0.1.12 │ │ Update State: Failed │ │ Update Error: failed to run update on reboot: expected 0.1.13 and got 0.1.12 │ │ Last modified: 2024-08-22 14:52 │ │ GUID: 96f43f55-bce3-4463-94a5-4d7954b67772 │ │ Device Flags: • Internal device │ │ • Updatable │ │ • System requires external power source │ │ • Supported on remote server │ │ • Needs a reboot after installation │ │ • Reported to remote server │ │ • Cryptographic hash verification is available │ │ • Device is usable for the duration of the update │ │ │ └─ThinkPad L14/L15 Gen 4 System Update: │ New version: 0.1.13 │ Remote ID: lvfs │ Release ID: 55851 │ Summary: Lenovo ThinkPad L14/L15 Gen 4 System Firmware │ Variant: W-BIOS Machine types: 21H1, 21H2 │ License: Proprietary │ Size: 28.8 MB │ Created: 2023-08-02 │ Urgency: High │ Vendor: Lenovo │ Release Flags: • Trusted metadata │ • Is upgrade │ Description: │ Lenovo ThinkPad L14 Gen 4 System Firmware │ │ W/A for no sound from Internal Speakers when select Internal Speaker as output device with headset attached. │ │ Update L1415-2 EDID table following "Lenovo_EDID-format_ver54- Intel L14 L15 Gen3 Gen4 20230802.xlsx" │ Checksum: 593f90134bf5c8dd70dc261128e447601c21745acdb910196392f74716d789b6 │ └─Embedded Controller: │ Device ID: bdabeb256aff8415c3fddae68632a65269bb3f55 │ Previous version: 0.1.9 │ Update State: Failed │ Update Error: failed to run update on reboot: expected 0.1.13 and got 0.1.9 │ Last modified: 2024-08-22 15:42 │ GUID: 5c0afb70-bd0a-4dd4-9a4c-d216544288d0 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Reported to remote server │ • Device is usable for the duration of the update │ └─ThinkPad L14/L15 Gen 4 Embedded Controller Update: New version: 0.1.13 Remote ID: lvfs Release ID: 87532 Summary: Lenovo ThinkPad L14/L15 Gen 4 Embedded controller Firmware License: Proprietary Size: 1.1 MB Created: 2024-02-29 Urgency: High Tested by Lenovo: Tested: 2024-07-22 Distribution: ubuntu 23.10 Old version: 0.1.9 Version[fwupd]: 1.9.16 Tested by Lenovo: Tested: 2024-04-03 Distribution: ubuntu 23.10 Old version: 0.1.12 Version[fwupd]: 1.9.15 Vendor: Lenovo Release Flags: • Trusted metadata • Is upgrade • Tested by trusted vendor Description: Lenovo ThinkPad L14L15 Gen 4 Embedded controller Firmware-Revert Follow LPM3, add WA for IFLAG abnormal during status change Checksum: 7e1589fdb231d2209b3b1f023fee622b9a13237b6cdb2bf44868ddd9ec0df9df